Help with assertion encryption ?

[Tom Zeller]

>> I know that the SP did not have the correct metadata for the IdP, but
>> I was surprised the IdP bailed.
>
> Well, what is actually relevant is the metadata that the IdP has for the
> SP to which it's trying to encrypt.  If that SP metadata included a
> KeyDescriptor/EncryptionMethod specifying AES GCM, then mystery solved.
> If not, I'm stumped.

Sorry to waste time and traffic, I'm a dork. I generated the SP's
metadata somehow, I don't remember, and it specifies :

<md:KeyDescriptor>
  ...
  <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes128-gcm"/>
  <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes192-gcm"/>
  <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#aes256-gcm"/>
  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes128-cbc"/>
  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes192-cbc"/>
  <md:EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#aes256-cbc"/>
  <md:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#tripledes-cbc"/>
  <md:EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
   <md:EncryptionMethod
Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>
</md:KeyDescriptor>